Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[Junos] Clear privilege does not include some clear queries

0

0

Article ID: KB30502 KB Last Updated: 23 Feb 2020Version: 2.0
Summary:

This article describes the CLI clear command options not included with clear command privileges.

Symptoms:

When creating a user with clear privileges, some clear commands are not allowed.

For example, the clear permissions include the following:

  • snmp - Clear Simple Network Management Protocol information.
  • system - Clear system information.

Clear privileges do not include:

  • clear logs - Clear contents of the log file.
  • clear lacp - Clear Link Aggregation Control Protocol information.
  • clear services - Clear services information.
  • clear security - Clear security information.
  • clear passive-monitoring - Clear passive monitoring statistics.
  • clear unified-edge - Clear unified-edge commands.
Cause:

This situation occurs in all Junos OS versions on all devices, and is an expected behavior.

Solution:

In order to allow the missing clear options, you can add them by running the clear services with the following commands:

lab@juniper# set system login class clear-privilege allow-configuration "clear services"
lab@juniper# set system login class clear-privilege confallow-commands "clear services"


[edit system login]
+ class clear-privilege {
+ permissions clear;
+ }

[edit system login]
+ user clear-user {
+ class clear-privilege;
+ authentication {
+ encrypted-password "$ABC123"; ## SECRET-DATA


lab-admin@Juniper# show system login class clear-privilege
permissions clear;

lab-admin@Juniper# show system login
user clear-user {
uid 2028;
class clear-privilege;
authentication {
encrypted-password "$ABC123"; ## SECRET-DATA

Related Links

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search